Medium
CVSS 6.2
Overview
Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.
CVE-2024-20806
Improper access control in Notification service prior to SMR Jan-2024 Release 1 ...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 6.2 (MEDIUM)
- Detected tags: none (tag impact: LOW)
Recommended actions:
- Prioritize remediation based on business criticality and exposure.
- Limit exposure and increase monitoring until fixed.